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AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows. 

1. (Currently Amended) A method of controlling access to resources, said method 
comprising: 

storing a policy decision for a resource in local memory, said policy decision 
received from a remote source of policy definitions, said policy decision 
based on a policy definition governing access to said resource and on 
requestor identifying information provided to said remote source; 

receiving a first request for access to said resource, said first request comprising 
said requestor identifying information; 

evaluating said first request using said policy decision in said local memory; 

receiving a notification from said remote source , said notification comprising an 
updated version of said policy decision that said policy decision in said 
local memory is aff e ct e d by a chang e in said policy definition ; 

receiving a second request for access to said resource , said second request 
comprising said requestor identifying information : and 

evaluating said second request based on said notification updated version of said 
policy decision . 

2. (Previously Presented) The method of Claim 1 wherein said resource is affiliated with 
another resource, and wherein further a policy decision for said other resource is 
received from said remote source and stored in said local memory. 

3. (Canceled) 

4. (Currently Amended) The method of Claim 1 wherein said notification identifies 
resources affected by said ch ang e updated version of said policy decision . 
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5. (Currently Amended) The method of Claim 1, wherein 

receiving said notification further comprises storing an said updated version of 
said policy decision in said local memor y; wh e r e in said notification 
compris e s said updatcd ^ yersion of said policy decision, and wherein said 
updat e d v e rsion of aaid policy decision is based on said change; and 

e valuating said s e cond r e qu e st furth e r compris e s using said -updated v e rsion o f 
said policy decision in said local m e mory . 

6. (Canceled) 

7. (Previously Presented) The method of Claim 1 further comprising: 

sending a message to said remote source, said message requesting updates for 
policy decisions stored in said local memory. 

8. (Previously Presented) The method of Claim 1 wherein a period of time said policy 
decision is valid is also received from said remote source and stored locally. 

9. (Previously Presented) The method of Claim 1 wherein a condition associated with 
said policy definition is also received from said remote source and stored locally, 
wherein said condition is enforced locally. 

10. (Currently Amended) A method of controlling access to resources, said method 
comprising: 

receiving a first request for access to a resource, said first request comprising 
requestor identifying information, wherein said first request is referred to a 
remote source of a policy definition that governs access to said resource for 
evaluation; 

receiving from said remote source a policy decision for said resource, said policy 
decision based on said policy definition and said requestor identifying 
information; and 
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storing said policy decision in local memory, wherein a second request for access 
to said resource is evaluated locally using said policy decision stored in 
said local memory; and 

receiving a notification from said remote source , said notification comprising an 
updated version of that said policy decision-i s - affect e d by a change in Gaid 
policy dofmition , wherein a third request for access to said resource is 
evaluated based on said notificatio n: updated version of said policy 
decision . 

11. (Previously Presented) The method of Claim 10 wherein said resource is affiliated 
with another resource, wherein a policy decision for said other resource is received 
from said remote source and stored in said local memory. 

12. (Canceled) 

13. (Currently Amended) The method of Claim 10 wherein said notification identifies 
resources affected by said ehange updated version of said policy decision . 

14. (Currently Amended) The method of Claim 10, wherein 

receiving said notification further comprises storing en said updated version of 
said policy decision in said local memor y, wherein said third r e qu e st is 
e valuated using said updated version of oaid policy d e cision, wh e rein said 
notification compri s es said updat e d version of said policy d e cision and 
wher e in said updat e d v e rsion of s aid policy d e cision is bas e d on said 

15. (Canceled) 

16. (Previously Presented) The method of Claim 10 further comprising: 

sending a message to said remote source, said message requesting updates to 
policy decisions stored in said local memory. 
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17. (Original) The method of Claim 10 farther comprising: 

receiving information that identifies a period of time said policy decision is valid. 

18. (Previously Presented) The method of Claim 10 further comprising: 

receiving from said remote source a condition associated with said policy 
definition, wherein said condition is enforced locally. 

19. (Currently Amended) A computer-usable medium having computer-readable program 
code embodied therein for causing a computer system to perform a method of 
controlling access to resources, said method comprising: 

storing in local memory a policy decision for a first resource, said policy decision 
received from a remote source of policy definitions, said policy decision 
based on a policy definition governing access to said first resource and on 
requestor identifying information provided to said source; 

receiving a first request for access to said first resource, said request comprising 
said requestor identifying information; 

evaluating said first request using said policy decision stored in said local 
memory; 

receiving a notification from said remote source , said notification comprising an 
updated version of said policy decision that said policy decision in said 
local memory is affect e d by a chang e in said policy definition ; 
receiving a second request for access to said first resource; and 
evaluating said second request based on said notification updated version of said 
policy decision . 

20. (Previously Presented) The computer-usable medium of Claim 19 wherein said first 
resource is affiliated with another resource, wherein a policy decision for said other 
resource is received from said remote source and stored in said local memory. 

21. (Canceled) 
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22. (Previously Presented) The computer-usable medium of Claim 19 wherein said 
computer-readable program code embodied therein causes said computer system to 
perform said method further comprising: 

sending a message to said remote source, said message requesting updates for 
policy decisions stored in said local memory. 

23. (Previously Presented) The computer-usable medium of Claim 19 wherein a period of 
time said policy decision is valid is also received from said remote source and stored 
locally. 

24. (Previously Presented) The computer-usable medium of Claim 19 wherein a 
condition associated with said policy definition is also received from said remote 
source and stored locally, wherein said condition is enforced locally. 

25. (Previously Presented) The computer-usable medium of Claim 19 wherein said 
computer-readable program code embodied therein causes said computer system to 
perform said method further comprising: 

receiving a first request for access to a second resource, said first request 

comprising said requestor identifying information; 
providing said requestor identifying information to said remote source; 
receiving from said remote source a policy decision for said second resource, 
said policy decision for said second resource based on a policy definition that 

governs access to said second resource and said requestor identifying 

information; and 

storing said policy decision for said second resource in said local memory, 
wherein a second request for said second resource is evaluated using said 
policy decision stored in said local memory. 
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